fix(auth): add error handling for JWT lifetime configuration - Add try-catch block to handle invalid JWT_LIFETIME_SECONDS environment variable - Default to 360 seconds when environment variable is not a valid integer - Apply same fix to both API and client authentication backendsdocs(docker): add security warning for CORS configuration - Add comment warning about default CORS_ALLOWED_ORIGINS setting - Emphasize need to override wildcard with specific domains in production ```
172 lines
4.3 KiB
YAML
172 lines
4.3 KiB
YAML
services:
|
|
cognee:
|
|
container_name: cognee
|
|
restart: always
|
|
networks:
|
|
- cognee-network
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|
|
volumes:
|
|
- ./cognee:/app/cognee
|
|
- .env:/app/.env
|
|
environment:
|
|
- DEBUG=false # Change to true if debugging
|
|
- HOST=0.0.0.0
|
|
- ENVIRONMENT=local
|
|
- LOG_LEVEL=INFO
|
|
# CAUTION: Default '*' allows all origins. Override with specific domains in production.
|
|
- CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS:-*}
|
|
extra_hosts:
|
|
# Allows the container to reach your local machine using "host.docker.internal" instead of "localhost"
|
|
- "host.docker.internal:host-gateway"
|
|
ports:
|
|
- 8000:8000
|
|
- 5678:5678 # Debugger port
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: "4.0"
|
|
memory: 8GB
|
|
|
|
# Cognee MCP Server - Model Context Protocol server for IDE integration
|
|
cognee-mcp:
|
|
container_name: cognee-mcp
|
|
profiles:
|
|
- mcp
|
|
networks:
|
|
- cognee-network
|
|
build:
|
|
context: .
|
|
dockerfile: cognee-mcp/Dockerfile
|
|
volumes:
|
|
- .env:/app/.env
|
|
environment:
|
|
- DEBUG=false # Change to true if debugging
|
|
- ENVIRONMENT=local
|
|
- LOG_LEVEL=INFO
|
|
- TRANSPORT_MODE=sse
|
|
# Database configuration - should match the main cognee service
|
|
- DB_PROVIDER=${DB_PROVIDER:-sqlite}
|
|
- DB_HOST=${DB_HOST:-host.docker.internal}
|
|
- DB_PORT=${DB_PORT:-5432}
|
|
- DB_NAME=${DB_NAME:-cognee_db}
|
|
- DB_USERNAME=${DB_USERNAME:-cognee}
|
|
- DB_PASSWORD=${DB_PASSWORD:-cognee}
|
|
# MCP specific configuration
|
|
- MCP_LOG_LEVEL=INFO
|
|
- PYTHONUNBUFFERED=1
|
|
extra_hosts:
|
|
- "host.docker.internal:host-gateway"
|
|
ports:
|
|
- "8000:8000" # MCP port
|
|
- "5678:5678" # MCP debugger port
|
|
deploy:
|
|
resources:
|
|
limits:
|
|
cpus: "2.0"
|
|
memory: 4GB
|
|
|
|
# NOTE: Frontend is a work in progress and supports minimum amount of features required to be functional.
|
|
# If you want to use Cognee with a UI environment you can integrate the Cognee MCP Server into Cursor / Claude Desktop / Visual Studio Code (through Cline/Roo)
|
|
frontend:
|
|
container_name: frontend
|
|
restart: always
|
|
environment:
|
|
- NEXT_PUBLIC_BACKEND_API_URL=${NEXT_PUBLIC_BACKEND_API_URL:-http://localhost:8000}
|
|
profiles:
|
|
- ui
|
|
build:
|
|
context: ./cognee-frontend
|
|
dockerfile: Dockerfile
|
|
volumes:
|
|
- ./cognee-frontend/src:/app/src
|
|
- ./cognee-frontend/public:/app/public
|
|
ports:
|
|
- 3000:3000
|
|
# - 9229:9229 # Debugging
|
|
networks:
|
|
- cognee-network
|
|
|
|
neo4j:
|
|
image: neo4j:latest
|
|
container_name: neo4j
|
|
restart: always
|
|
profiles:
|
|
- neo4j
|
|
ports:
|
|
- 7474:7474
|
|
- 7687:7687
|
|
environment:
|
|
- NEO4J_AUTH=neo4j/pleaseletmein
|
|
- NEO4J_PLUGINS=["apoc", "graph-data-science"]
|
|
networks:
|
|
- cognee-network
|
|
|
|
chromadb:
|
|
image: chromadb/chroma:0.6.3
|
|
container_name: chromadb
|
|
restart: always
|
|
profiles:
|
|
- chromadb
|
|
environment:
|
|
- IS_PERSISTENT=TRUE
|
|
- CHROMA_SERVER_AUTH_CREDENTIALS=${VECTOR_DB_KEY}
|
|
- CHROMA_SERVER_AUTH_CREDENTIALS_PROVIDER=chromadb.auth.token.TokenConfigServerAuthCredentialsProvider
|
|
- CHROMA_SERVER_AUTH_TOKEN_TRANSPORT_HEADER=AUTHORIZATION
|
|
- CHROMA_SERVER_AUTH_PROVIDER=chromadb.auth.token.TokenAuthServerProvider
|
|
volumes:
|
|
- .chromadb_data/:/chroma/chroma/
|
|
networks:
|
|
- cognee-network
|
|
ports:
|
|
- "3002:8000"
|
|
|
|
postgres:
|
|
image: pgvector/pgvector:pg17
|
|
container_name: postgres
|
|
restart: always
|
|
profiles:
|
|
- postgres
|
|
environment:
|
|
POSTGRES_USER: cognee
|
|
POSTGRES_PASSWORD: cognee
|
|
POSTGRES_DB: cognee_db
|
|
# - postgres_data:/var/lib/postgresql/data
|
|
ports:
|
|
- 5432:5432
|
|
networks:
|
|
- cognee-network
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: redis
|
|
profiles:
|
|
- redis
|
|
ports:
|
|
- "6379:6379"
|
|
networks:
|
|
- cognee-network
|
|
volumes:
|
|
- redis_data:/data
|
|
command: [ "redis-server", "--appendonly", "yes" ]
|
|
|
|
|
|
redisinsight:
|
|
image: redislabs/redisinsight:latest
|
|
container_name: redisinsight
|
|
restart: always
|
|
ports:
|
|
- "5540:5540"
|
|
networks:
|
|
- cognee-network
|
|
|
|
|
|
networks:
|
|
cognee-network:
|
|
name: cognee-network
|
|
|
|
volumes:
|
|
chromadb_data:
|
|
postgres_data:
|
|
redis_data:
|